2018

Unrestricted file upload vulnerability in the Files plugin in ProjectPier 0.88 and earlier allows remote authenticated u

SolarWinds Serv-U MFT before 15.1.6 HFv1 assigns authenticated users a low-entropy session token that can be included in

The ForgotLoginDetails resource in Atlassian Jira before version 7.6.6, from version 7.7.0 before version 7.7.4, from ve

A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/menuaccess.php chbKey1 parameter.

A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/logbook.php txtSearch parameter.

A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/info.php key1 parameter.

A SQL injection issue was discovered in Nagios XI before 5.4.13 via the admin/commandline.php cname parameter.

p910nd on Inteno IOPSYS 2.0 through 4.2.0 allows remote attackers to read, or append data to, arbitrary files via reques

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versio

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versio

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versio

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versio

In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versio

Cloud Foundry Foundation UAA, versions 4.12.X and 4.13.X, introduced a feature which could allow privilege escalation ac

Jenkins before versions 2.44, 2.32.2 is vulnerable to a remote code execution vulnerability involving the deserializatio

dg-user/?controller=users&action=add in doorGets 7.0 has CSRF that results in adding an administrator account.

An exploitable XML entity injection vulnerability exists in OpenFire User Import Export Plugin 2.6.0. A specially crafte

kernel KVM before versions kernel 4.16, kernel 4.16-rc7, kernel 4.17-rc1, kernel 4.17-rc2 and kernel 4.17-rc3 is vulnera

Infinispan permits improper deserialization of trusted data via XML and JSON transcoders under certain server configurat

An issue was discovered in Libav 12.3. A read access violation in the mov_probe function in libavformat/mov.c allows rem

The decompileSETTARGET function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a fi

An issue was discovered in Frog CMS 0.9.5. There is a file upload vulnerability via the admin/?/plugin/file_manager/uplo

An issue was discovered in cloudwu/cstring through 2016-11-09. There is a memory leak vulnerability that could lead to a

The decompileJUMP function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file si

Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030

Exploitable denial of service vulnerabilities exists in the Service Agent functionality of Moxa EDR-810 V4.1 build 17030

An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 1703031

An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 1703031

An exploitable denial of service vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 1703031

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 1703031

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 1703031

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 1703031

An exploitable Weak Cryptography for Passwords vulnerability exists in the web server functionality of Moxa EDR-810 V4.1

An exploitable information disclosure vulnerability exists in the Server Agent functionality of Moxa EDR-810 V4.1 build

An exploitable cross-site request forgery vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 buil

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 1703031

An exploitable clear text transmission of password vulnerability exists in the web server and telnet functionality of Mo

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 1703031

An exploitable command injection vulnerability exists in the web server functionality of Moxa EDR-810 V4.1 build 1703031

On Arris Touchstone Telephony Gateway TG1682G 9.1.103J6 devices, a logout action does not immediately destroy all state

An issue was discovered on Actiontec WCB6200Q before 1.1.10.20a devices. The admin login session cookie is insecurely ge

In Schneider Electric ClearSCADA 2014 R1 (build 75.5210) and prior, 2014 R1.1 (build 75.5387) and prior, 2015 R1 (build

Directory traversal vulnerability in the AJAX function of Ultimate Member plugin prior to version 2.0.4 for WordPress al

Untrusted search path vulnerability in CELSYS, Inc CLIP STUDIO series (CLIP STUDIO PAINT (for Windows) EX/PRO/DEBUT Ver.

Unrestricted file upload vulnerability in SiteBridge Inc. Joruri Gw Ver 3.2.0 and earlier allows remote authenticated us

In 2345 Security Guard 3.7, the driver file (2345NsProtect.sys, X64 version) allows local users to cause a denial of ser

In 2345 Security Guard 3.7, the driver file (2345NsProtect.sys, X64 version) allows local users to cause a denial of ser

The DCTStream::readHuffSym function in Stream.cc in the DCT decoder in xpdf before 4.00 allows remote attackers to cause

An issue was discovered in PbootCMS v1.0.7. Cross-site request forgery (CSRF) vulnerability in apps/admin/controller/sys

The newVar_N function in decompile.c in libming through 0.4.8 mishandles cases where the header indicates a file size gr